| firehose:CreateDeliveryStream | Admin |
| firehose:DeleteDeliveryStream | Admin |
| firehose:StartDeliveryStreamEncryption | Admin |
| firehose:StopDeliveryStreamEncryption | Admin |
| firehose:UpdateDestination | Admin |
| kinesis:CreateStream | Admin |
| kinesis:DecreaseStreamRetentionPeriod | Admin |
| kinesis:DeleteStream | Admin |
| kinesis:DeregisterStreamConsumer | Admin |
| kinesis:DisableEnhancedMonitoring | Admin |
| kinesis:EnableEnhancedMonitoring | Admin |
| kinesis:IncreaseStreamRetentionPeriod | Admin |
| kinesis:MergeShards | Admin |
| kinesis:RegisterStreamConsumer | Admin |
| kinesis:SplitShard | Admin |
| kinesis:StartStreamEncryption | Admin |
| kinesis:StopStreamEncryption | Admin |
| kinesis:UpdateShardCount | Admin |
| kinesisanalytics:AddApplicationCloudWatchLoggingOption | Admin |
| kinesisanalytics:AddApplicationInput | Admin |
| kinesisanalytics:AddApplicationInputProcessingConfiguration | Admin |
| kinesisanalytics:AddApplicationOutput | Admin |
| kinesisanalytics:AddApplicationReferenceDataSource | Admin |
| kinesisanalytics:AddApplicationVpcConfiguration | Admin |
| kinesisanalytics:CreateApplication | Admin |
| kinesisanalytics:CreateApplicationPresignedUrl | Admin |
| kinesisanalytics:CreateApplicationSnapshot | Admin |
| kinesisanalytics:DeleteApplication | Admin |
| kinesisanalytics:DeleteApplicationCloudWatchLoggingOption | Admin |
| kinesisanalytics:DeleteApplicationInputProcessingConfiguration | Admin |
| kinesisanalytics:DeleteApplicationOutput | Admin |
| kinesisanalytics:DeleteApplicationReferenceDataSource | Admin |
| kinesisanalytics:DeleteApplicationSnapshot | Admin |
| kinesisanalytics:DeleteApplicationVpcConfiguration | Admin |
| kinesisanalytics:RollbackApplication | Admin |
| kinesisanalytics:UpdateApplication | Admin |
| kinesisanalytics:UpdateApplicationMaintenanceConfiguration | Admin |
| kinesisvideo:ConnectAsMaster | Admin |
| kinesisvideo:ConnectAsViewer | Admin |
| kinesisvideo:CreateSignalingChannel | Admin |
| kinesisvideo:CreateStream | Admin |
| kinesisvideo:DeleteSignalingChannel | Admin |
| kinesisvideo:DeleteStream | Admin |
| kinesisvideo:SendAlexaOfferToMaster | Admin |
| kinesisvideo:UpdateDataRetention | Admin |
| kinesisvideo:UpdateSignalingChannel | Admin |
| kinesisvideo:UpdateStream | Admin |
| firehose:GetKinesisStream | Operator |
| firehose:PutRecord | Operator |
| firehose:PutRecordBatch | Operator |
| firehose:TagDeliveryStream | Operator |
| firehose:UntagDeliveryStream | Operator |
| kinesis:AddTagsToStream | Operator |
| kinesis:PutRecord | Operator |
| kinesis:PutRecords | Operator |
| kinesis:RemoveTagsFromStream | Operator |
| kinesis:SubscribeToShard | Operator |
| kinesisanalytics:StartApplication | Operator |
| kinesisanalytics:StopApplication | Operator |
| kinesisanalytics:TagResource | Operator |
| kinesisanalytics:UntagResource | Operator |
| kinesisvideo:GetHLSStreamingSessionURL | Operator |
| kinesisvideo:PutMedia | Operator |
| kinesisvideo:TagResource | Operator |
| kinesisvideo:TagStream | Operator |
| kinesisvideo:UntagResource | Operator |
| kinesisvideo:UntagStream | Operator |
| kinesis:GetRecords | ReadOnly |
| kinesisanalytics:DiscoverInputSchema | ReadOnly |
| kinesisvideo:GetMedia | ReadOnly |
| firehose:DescribeDeliveryStream | Metadata |
| firehose:ListDeliveryStreams | Metadata |
| firehose:ListTagsForDeliveryStream | Metadata |
| kinesis:DescribeLimits | Metadata |
| kinesis:DescribeStream | Metadata |
| kinesis:DescribeStreamConsumer | Metadata |
| kinesis:DescribeStreamSummary | Metadata |
| kinesis:GetShardIterator | Metadata |
| kinesis:ListShards | Metadata |
| kinesis:ListStreamConsumers | Metadata |
| kinesis:ListStreams | Metadata |
| kinesis:ListTagsForStream | Metadata |
| kinesisanalytics:DescribeApplication | Metadata |
| kinesisanalytics:DescribeApplicationSnapshot | Metadata |
| kinesisanalytics:DescribeApplicationVersion | Metadata |
| kinesisanalytics:GetApplicationState | Metadata |
| kinesisanalytics:ListApplicationSnapshots | Metadata |
| kinesisanalytics:ListApplicationVersions | Metadata |
| kinesisanalytics:ListApplications | Metadata |
| kinesisanalytics:ListTagsForResource | Metadata |
| kinesisvideo:DescribeSignalingChannel | Metadata |
| kinesisvideo:DescribeStream | Metadata |
| kinesisvideo:GetClip | Metadata |
| kinesisvideo:GetDASHStreamingSessionURL | Metadata |
| kinesisvideo:GetDataEndpoint | Metadata |
| kinesisvideo:GetIceServerConfig | Metadata |
| kinesisvideo:GetMediaForFragmentList | Metadata |
| kinesisvideo:GetSignalingChannelEndpoint | Metadata |
| kinesisvideo:ListFragments | Metadata |
| kinesisvideo:ListSignalingChannels | Metadata |
| kinesisvideo:ListStreams | Metadata |
| kinesisvideo:ListTagsForResource | Metadata |
| kinesisvideo:ListTagsForStream | Metadata |
